Philips Interventional Workspot (Release 1.3.2, 1.4.0, 1.4.1, 1.4.3, 1.4.5), Coronary Tools/Dynamic Coronary Roadmap/Stentboost Live (Release 1.0), ViewForum (Release 6.3V1L10). The software constructs all or part of an OS command using externally influenced input from an upstream component but does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when sent to a downstream component.
References
| Link | Resource |
|---|---|
| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-21-019-01 | |
| https://www.philips.com/a-w/security/security-advisories/product-security-2021.html#2021_archive | |
| https://us-cert.cisa.gov/ics/advisories/icsma-21-019-01 | Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
|
History
04 Jun 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
21 Nov 2024, 05:21
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://us-cert.cisa.gov/ics/advisories/icsma-21-019-01 - Third Party Advisory, US Government Resource |
Information
Published : 2021-01-26 18:15
Updated : 2025-06-04 20:15
NVD link : CVE-2020-27298
Mitre link : CVE-2020-27298
CVE.ORG link : CVE-2020-27298
JSON object : View
Products Affected
philips
- interventional_workspot
- stentboost_live
- viewforum
- coronary_tools
- dynamic_coronary_roadmap
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')